Dear Valued Customer
Recently e-mail fraud is widely used by perpetrators. The fraud manipulated by the change
of banking details is now required for the company or individual to be aware of. This type
of fraud usually happens when perpetrators assume the identity of a legitimate supplier and
divert the payment of invoices into their own account. This can happen when a legitimate
document and/or email is forged, altered or manipulated with the intention of going through
the normal payment system of an organization.
To minimize the risk of fraud perpetrated by the change of banking details, CS LoxInfo would
like to alert users to be more careful in using email and Internet banking as follows.
1. Delete suspicious e-mail and do not open the email or the attachment from an unknown
person or known person who have never communicated about the issue concerned in the email.
Open the email attachment infected with the virus may cause damage to your computer.
Your computer may be infected or the important data information may be stolen.
2. Aware of the emails asking you to provide personal or financial information. You should not
reply to such kind of email. Normally, the banks always clearly announce that there is no policy
to ask for private formation from the customers. If you receive this kind of e-mail, you should
either delete or contact the bank.
3. Do not use e-mail to communicate the change of bank account details because the e-mail
and the attachment can be forged. Always use another channel such as Fax and telephone
to confirm about the change. The appropriate policy in changing the bank account should be
implemented. The amendments to banking details of both organizations and suppliers should
be verified by the company’s authorized person.
4. Perform business transactions based on bank name, bank account and country as officially
agreed with the supplier. Perpetrators may send fake emails to both parties. Always make
sure the bank details are legitimate by comparing with the existing records before making
payment.
5. Always open the website by typing the URL address yourself. Do not open the links in the
email as it may lead you to the phishing website. The phishing website looks similar to the
real website and is very hard to notice.
6. CS LoxInfo has never sent an email with the URL requesting the customers to change
the password or personal information. In case you receive such kind of email, please delete
it immediately or contact Corporate Network and Service Center at 02-263-7117 to verify
the information. However, the users should always change the password for security.
7. Make sure that the website is secured or encrypted (https://) before enter any sensitive
information such as credit card number and other.
8. Install Antivirus and keep updating the version and signature.
Fraud perpetrated by the change of banking details is a real and highly prevalent threat,
and in order to minimize your organization's risk of the payment, the organizations need to
continuously ensure the awareness of these types of fraud.
We hope that this information will be useful for you.
Reference URL:
1. https://www.us-cert.gov/ncas/tips/ST04-014
2. https://thaicert.or.th/papers/general/2012/pa2012ge007.html
Thank you for using CS LoxInfo.
Best regards,
Corporate Network and Service Center
Customer Support Department
CS LoxInfo Public Company Limited
Tel: 0-2263-7117 (24 hours 7 days)
Fax: 0-2263-8110
E-mail : service@csloxinfo.com